New HIH Index Tracks Disclosed Material Cyber Breaches Without Combining Loss Estimates
Summary
Richard Bird’s HIH Index tracks material cyber incidents using SEC filings and news or company statements. It grades entries by source strength and avoids adding loss figures that are often missing or based on different evidence.
Key points
- Richard Bird created The Hacker in a Hoodie (HIH) Index to track disclosed material cyber incidents.
- The index has two ledgers: one based on SEC EDGAR filings and another on news articles and company statements.
- Its SEC ledger tracks 8-K disclosures, which public companies have been required to file for material cyber incidents since 2023.
- At publication, the index contained information on more than 100 incidents.
- Entries are graded as “verified” for SEC filings, “attested” for company statements, or “inferred” for news reports.
- Bird does not combine loss figures because many entries are unquantified and reported figures come from different evidence tiers.
Article Details
- Event Type
- Launch of The Hacker in a Hoodie (HIH) Index, a tracker of disclosed material cyber incidents.
- Impact
- The index organizes breach disclosures from SEC filings, company statements, and news reports, grading entries by source reliability. It contained information on more than 100 incidents at the time of writing. Its source grading and refusal to aggregate losses from incomplete or differently supported figures are intended to help readers verify disclosures without presenting an unsupported total.